Citizens' Protection in Federal Databases Act Introduced 203
SewersOfRivendell writes "Quote from http://boingboing.net/: 'EFF, EPIC, CDT, ACLU and Free Congress have drafted a bill that's been introduced by Senator Wyden today, for a new law called "The Citizens' Protection in Federal Databases Act." This is a hell of a law. It finds that various species of spooks are making avid use of commercial and governmental databases, merging them and aggregating them, without transparency, accountability, or any real understanding of the danger to civil liberties involved in this practice. Accordingly, it requires any Fed agency using non-Fed databases to cut it out and make a full report to Congress on who they're buying database and database-services from, what they're doing to preserve privacy, why they're doing what they're doing, and whether they actually have a realistic chance of catching any bad guys. And it calls into account Feds who abuse their authority and limits the kind of doomsday hypotheticals that can be used to justify such abuse.' PDF draft of the bill here."
Better link ...? (Score:4, Interesting)
Re:Better link ...? (Score:2)
It's just a draft (Score:5, Informative)
I'd keep an eye on Thomas [loc.gov] over the next week or so. Once it's been read on the floor, it'll wind up there.
Re:It's just a draft (Score:5, Informative)
Better link ...? Here you go. (Score:3, Informative)
I am looking at the ACLU news page and it is right on top!
Certainly a better resource than "Boing Boing".
Accountability? (Score:5, Insightful)
Re:Accountability? (Score:3, Funny)
"I do not recall"
-B
Re:Accountability? (Score:3, Interesting)
There was a really good editorial on this in my local newspaper last week. This phrase seems to have replaced "pleading the 5th", and outright lying in court. It is funny how Enron, Worldcomm and a few other executives, working with outside specialists helped produced hundreds of shell companies and transferred money around for years to avoid stating loses and paying taxes but when confronted about specifics, they seeme
Re:Accountability? (Score:2)
Yes, of course they are. It's a requirement for a $500 million job. If they can't trust you in court, why would they give you the job?
Oh ... thats a relief ... (Score:2)
So in other words the US Govt is significantly (Enron) better (Worldcom) than (Anderson) most (ImClone) companies... and (Martha Stewart) people.
Thats a relif.
Likely responses... (Score:5, Funny)
ACLU (Score:4, Funny)
Re:ACLU (Score:2)
do not call. just tap. :)
Obviously.. (Score:4, Funny)
It's obvious that the EFF, EPIC, CDT, ACLU, Free Congress and Senator Wyden are terrorist sympathizers
A good start (Score:5, Insightful)
Re:A good start (Score:5, Insightful)
Re:A good start (Score:2)
That's just depressing. Dammit.
Competency (Score:2)
It's the corporations that have a $ behind what they need to do that worry me. It's amazing what those munchkins can accomplish if you wave a dollar in front of their nose.
Bill Is Not Going to Happen (Score:4, Funny)
Re:Bill Is Not Going to Happen - for the best? (Score:2)
Hmm.. I'm confused. How do we feel about cops writing an essay about what they did last weekend, instead of walking the beat?
It'll be a hell of a law... (Score:3, Funny)
Re:It'll be a hell of a law... (Score:2)
Good. (Score:3, Interesting)
There is a medical database, an edited down version of which is available, giving just gender, date of birth, a list of medical defects, and a list of medical injuries (with the remainder omitted for privacy). Then there is also the employment database of the company you work at, an edited version of which is available, giving name, gender, date of birth and phone number. If you were a manager at this company you could use the two databases together, using the "gender" and "date of birth" fields to merge the two. This data could then be used, say, leaked to insurance or marketing companies, or you could even use it yourself for other nefarious purposes.
Thus, it is possible to obtain a good deal of data even from just small portions if one uses a sufficiently large number of different databases. Someone did a study on this, but right now I can't find the link. I'll be greatful to anyone who replies to this comment with it. This Act can only be a good thing.
Re:Good. (Score:2)
Just when I thought I was about to have what little privacy I have left invaded, it turns out that there were other males born on Febuary 30th*, 1982. Whew!
*Note: this isn't really my birthdate.
Found the links I needed. (Score:5, Informative)
This is from another article, reprinted from Newsweek
And finally, from Dr. Latanya Sweeney's CV itself [cmu.edu]:
Re:Found the links I needed. (Score:2, Insightful)
And to think that folks used to move out to the mountains to drop off government radar.
Re:Found the links I needed. (Score:2)
Moving around a lot within the same county/state might work though. If your zip code changes every three years, all the records on you will be "fragmented" and hard to stitch back together. I should have records in 4 different areas now, even though I only moved once (at age 5)
Re:Found the links I needed. (Score:2)
That narrows the scope quite a lot. If you know beyond a doubt that person X is inside a given database, it is a fairly trivial operation to find what information is necessary to uniquely identify that person. If you rule out the name fields and id fields, its a simple task to run through the DB and identify a minimal index set.
As much as I'd love to see this bill pass... (Score:3, Insightful)
On the other hand, does this law apply to the private sector?
I already emailed my Rep. to support it. You should do the same.
Re:As much as I'd love to see this bill pass... (Score:2, Troll)
no, Bush likes privacy when it pertains to releasing documents from his father's administration, classified 9/11 reports, or his VP's meetings with Enron execs. Now, THAT is privacy!
Re:As much as I'd love to see this bill pass... (Score:2)
Say what? (Score:2)
Wow, that is quite a law! Since when do laws find what "various species of spooks are making avid use of"?
Interesting law (Score:4, Interesting)
Whoa, this is bad (Score:5, Interesting)
According to the ACLU, because I'm consolidating public information, I'm a national security threat. I should also be forced to submit to even more beaurocratic loopholes to get data that's already public, or be stopped from accessing to much public data to begin with. And I thought the ACLU was all about personal freedom and open governments
Whoops, its only federal (Score:5, Interesting)
However, because Slashdotters never like to admit total defeat, I'd like to pose the question. Do you think the the ACLU is still opposed to private citizens like me consolidating so many public government databases about individual people and properties?
Re:Whoops, its only federal (Score:4, Informative)
However, there are few if any restrictions on the private sector. This is why most of us receive so much junk mail. In recent years, the FBI and others have begun sidestepping their restrictions by turning to private companies to collect and aggregate data for them.
My understanding of this law is that they want to attack that very issue, government sidestepping the very necessary restraints that we have placed on it.
Re:Whoa, this is bad (Score:4, Insightful)
Good. You may be inconvenienced, but in the long run it's a lot more advantageous for us to gain some protection from overzealous spooks than it is for us to be able to research properties a little faster. Annoying for you, maybe, but just because the governmental agency you work for is benign, doesn't mean they all are.
Re:Whoa, this is bad (Score:2)
The intent of the bill (as I read this blurb) is to make government information keeping accountable - not to prevent it. the government has many jobs, and obviously will need many databases. The bill does not seem to suggest that they are bad or unnecessary. It suggests it is necessary to keep track of how other agencies are using the data.
As examples
Re:Whoa, this is bad (Score:3, Insightful)
Conspiracy theorists mi
The workings of a police state (Score:4, Insightful)
The TIA was thought of as a means to search for patterns among public data on American citizens. This equates to the government (computer program or not) evaluating you and your habits for potential trends. It is, in effect, a way for the government to stake-out its citiziens.
Rights to privacy and due process state clearly: you are innocent until proven guilty, and you have a right to be left alone. What the TIA is doing is investigating every citizen regardless of their behavior.
A good analogy is putting up cameras in every public place. The place is public, and they're not targeting YOU specifically, so what's there to worry about, right?
For one, I want to live my life without knowing someone is looking over my shoulder unless they have a reason to look over my shoulder. Playing big-brother to all citizens is not where we want things to go.
Secondly, the argument "if you're not doing anything wrong, you have nothing to worry about" shows logical ineptitude. The first step in any police state is the ability to monitor citizens. The next step is to deem minority actions illegal (e.g. possessing communist doctorines [see McSurely v. McClellan, Supreme Court]).
When a single body controls both the laws and the force that enforces those laws, the only things they lack are the tools to find those breaking their laws.
History has shown that the public won't stop a government from enacting laws against minorities, especially if the law and/or enforcement of that law are vague, so instead of trust our government not to abuse their information gathering tools, I'd rather just not give them those tools.
If terrorists are on every street corner, either we should be having a lot more bombings (how hard is it to strap TNT to your chest and walk into a Burger King?), or the government has been doing a damn good job in the last decade without these tools.
If you folks want guarantees that terrorists can't do anything to us, enjoy living in a police state, I'll be buying a private island.
PS: To any trolls wanting to call me a liberal whiner who doesn't want my ID checked in an airport, I'll save you some time and humiliation. I typically agree with conservatives over liberals, I believe in airport ID checking and the like. Where do I draw the line? Going to an airport is not generally a regular experience for the vast majority of Americans and often involves international travel. Airports are a good place to scan, IMO. However, if I can be watched just by going through a normal week, I have issues.
Re:Whoa, this is bad (Score:2)
No, according to the ACLU, you are a personal privacy threat.
It's the Dept. of Homeland Security that thinks you're a national security threat.
What I want to see (Score:5, Insightful)
Then I want to be able to read the printout, walk back up to the desk, and say, Okay, now delete it. All of it.
Re:What I want to see (Score:4, Funny)
Re:What I want to see (Score:2)
Re:What I want to see (Score:2)
Re:What I want to see (Score:4, Insightful)
It's amazing how much they can ask you to give up in the way of privacy these days.
If you want to rent a car, have a VISA card, you're going to have to part with as much privacy as they demand of you.
And if your employer wants you to pee in a cup, record your fingerprints in their database and undergo a complete physical to which they obtain all the information, then you have freedom of choice: tolerate the invasion of your privacy, or look for a new job. What a fine choice.
The founding fathers of the United States of America would have understood the need for privacy, even though it was less an issue in their day. If it were quick and easy for the colonial administration to find and squelch them as rapidly as it could be done today, be assured there would be no Declaration of Independence or U.S. Constitution.
The new bill sounds excellent to me, something that Americans could actually be proud of having on their books (rather than the knee-jerk abomination that is the Patriot Act).
Law and Order is great, too, but it shouldn't be Easy and Convenient for anyone to impose Law and Order.
Otherwise, the "Law" and the "Order" that is so effectively imposed might gradually become something different than what the labels say.
Re:What I want to see (Score:2)
Re:What I want to see (Score:5, Insightful)
Or to give you whatever money of yours they have, or do whatever's necessary to sever all financial ties with you immediately.
You're not a customer? Then they're not going to have crap for information on you. They may send you solicitations, but that information is acquired from the credit bureau. You can tell Citibank to be put on their do not solicit list, and then your data will get flushed early in the process whenever it gets pulled from the bureaus. Yes, I've worked in this field, doing this exact thing. If you don't want your data to be sold by the bureaus, you can request that from the bureaus as well. There are three major ones (Equifax, Experian, Trans Union) and a few hundred thousand small ones (all of whom feed the big three).
You don't actually expect a company to do business with you if they're not allowed to keep records, right? Might I suggest you do some research into how godawful the banking industry was prior to the introduction of the credit bureaus? Think "Good Ole Boys Network" and you'll have a start on it... but it was considerably worse.
I'm not saying that some additional protections on consumer privacy shouldn't be in place (as a bare minimum everyone should be entitled to viewing their own credit report on demand, for no more than cost of mailing or free online). And I'm also not saying that the pendulum hasn't swung too far in the wrong direction (the law a couple years ago allowing companies unprecedented sharing of consumer information went way too far). But anyone who makes statements like that generally has no clue how the financial system, particularly the credit portion of it, actually works.
Re:What I want to see (Score:2, Funny)
Re:What I want to see (Score:2)
Actually, you did. You just didn't notice it amongst all the other mice type whenever you:
Why? Because all of those imply trust of one form or another. Most of them are the banking sy
Careful what you ask for (Score:2, Interesting)
If the government legislated that I (as a bank) couldn't keep any information about you - if I had to "delete it... all of it" as you say - if I couldn't retain your signature
Not delete, but VALIDATE (Score:3, Interesting)
Basically, walk into any place I think has information on me and ask to see it ALL. I then get to validate it for accuracy, and if I find parts inaccurate I get to say so. They then would have 30 days to prove me wrong, and if they can't, what I say is inaccurate gets deleted from my file automatically.
And validation needs to be based on s
Awesome! (Score:2)
Then move to Europe (Score:2)
Corps are required to provide you with any and all records they may have on you. That recordkeeping is subject to your consent (which you usually agree to when entering a business relationship, but can revoke at any time).
In addition, this bill is a non-starter in Sweden. What, US government agencies now would have to declare how they're merging databases? Won't happen here because they're not allowed to in the first place. Yes, you heard me correct: government agen
What's the limit for? (Score:5, Insightful)
All of the other agencies, particularly the Department of Commerce and it's Bureau of the Census, utilize numerous public databases in the process of their daily work. Why not include reports from them too?
Re:What's the limit for? (Score:5, Insightful)
Re:What's the limit for? (Score:2)
If you have evidence that suggests that the FBI has ever raided someone's home just because "the computer says [they] may have links to terrorism," please share it. Otherwise you're just spreading fear and alarmism.
The FBI may call you and/or write you a letter and/or knock on your door and ask to have a chat, but that's not the same as "busting yo
Re:What's the limit for? (Score:2)
Thats purely disingenuous. The poster describes a scenario where the FBI is unknowingly acting on bad information, and you cry Godwin.
Perhaps your expiriences with The Agency are limited to your dad's company picnics, but they can be pretty farkin scary if they're going after someone they think is a bad guy.
As for the examples you asked for, I decided to expand beyond computer error and include other abuse
I worked for the Census in 2000.. (Score:2)
Thanks for the EFF and ACLU (Score:5, Insightful)
even it fails: the bill encourages dicussion.
ACLU and EFF members will learn more.
The media will write about it, and learn more.
And Congresspeople will read it,
or have their staffers research it,
and maybe learn something.
I thank the EFF and ACLU for this.
And I donate to both of them.
Cheers, Joel
Re:Thanks for the EFF and ACLU (Score:2)
tinfoil (Score:3, Funny)
Enforcement is the problem (Score:2, Interesting)
Did anyone else ever notice... (Score:2, Interesting)
Re:Did anyone else ever notice... (Score:2)
the catchy acronym makers....
PABLUM.
Power hungry
American
Bureaucrats
Lying
Under oath for
Money
Good. (Score:5, Insightful)
Distractions (Score:2)
Damn! (Score:4, Funny)
You sure? (Score:4, Funny)
(Congress)
Random Congresscritter: And now Senator Wyden will be presenting a bill to.....o, excuse me, one moment please (whispers to man in black suit with mirror shades)....Well, it seems Senator Wyden is no longer with us. Moving on to the next piece of business.....
Database integration has a positive side too (Score:3, Insightful)
Certainly, it is prudent to keep prying eyes from using their power to intrude into our lives. But there is a balance to be struck as well, between protecting privacy and allowing government to make use of tools that I think many
Re:Database integration has a positive side too (Score:2)
Basic Math (Score:2)
Let's pretend that everyone has an equal chance of being born on any given day of the year (366). There are 99999 possible ZIP codes, and not all of them are used. You are either M or F (trans-gender issues aside). 366*2*99999 = 73,199,268. Why is this news exactly? Who couldn't figure this out before now?
Whenever I read "Protection"... (Score:2)
Closing a loophole (Score:2)
I think this is designed specifically to close a loophole where some agencies would simply outsource to contractors any data collection they themselves were forbidden from doing.
Frankly, for all the billions of dollars we are paying to keep our government running, I want THEM to be generating these databases anyway. That means I can hop on some website and suck it down "free" of charge. (I already paid for it.)
Say what you
Jaded Cynicism (Score:4, Insightful)
Read the law, visit senate.gov, and make it a law. (Score:5, Insightful)
If everyone on /. would just spend 2 minutes we could get this passed.
frob
Re:Jaded Cynicism (Score:2)
We've been burned. Left at the altar too many times. Stood up. Again and again. Does that mean we don't want it? No. But please excuse the crowd if they give their thumbs-up while crouching behind a pile of sandbags.
Re:Jaded Cynicism (Score:2)
I'm also going to be asking that they push for an amendment to require that said agencies account for how they recognize and correct errors in these databases, because while someone finding out that I've got some STD or another can be emb
...but will it protect us from the Reptoids? (Score:2)
The only reason. (Score:2, Interesting)
When you have people like Ron Wyden and Bob Barr agreeing on something you better pay attention.
Danger Will Robinson! (Score:3, Interesting)
Section 3 2A a list of all contracts, memoranda of understanding, or other agreements entered into by the department or agency, or any other national security, intelligence, or law enforcement element under the jurisdiction of the department or agency for the use of, access to, or analysis of databases that were obtained from or remain under the control of a non-Federal entity, or that contain information that was acquired initially by another department or agency of the Federal Government for the purposes other than national security, intelligence, or law enforcement.
"Uh, correct sir, we didn't provide a report on the use of this information because it was previously used for national security, sir. We are obligated to report if its for purposes other than national security, intelligence, or law enforcement. Yes sir, toilet paper purchase behavior is taken very seriously in the intelligence community, sir."
Liberty and Fear (Score:2, Informative)
Re:Liberty and Fear (Score:2)
Scary is the fact (Score:3, Insightful)
I guess the funny thing is the feds would be better off calling me than going to my house if they had reason to want to talk to me. Since public databases are so innaccurate.
But what's not funny is the fact that a government agency working on bad/outdated information could very well surround a old lady's house and when she goes walking around with her big black maglite they open fire and killing poor grandma. Of course they'll use the same tired excuse of we had bad intel.
I'm sure the guy that dropped the bomb on the chinese embasy said the same thing.
more information (Score:3, Informative)
However, if the only goal is to add more public information to databases, namely which databases are being joined and why, that's a good thing. Especially if it can be automated.
Irrelevant Because (Score:3, Interesting)
Bush will use the panick to get the public to give him all power to rip up what's left of the Constitution and start instituting a fascist dictatorship.
So this really won't matter in a year or two.
Think I'm paranoid? They're not preparing to draft eighty thousand medical personnel via the Selective Service because they think there MIGHT be a WMD problem "someday"... You heard it here first.
Re:Irrelevant Because (Score:2)
The ACLU is doing something constructive? Wow. (Score:3, Interesting)
Then some gay student's parents got involved. The lawyers got involved. The ACLU got involved. Next thing you know, the ACLU is threatening to sue the school, and the school finally caves in and assigns some disciplinary measures. I believe he was suspended for 10 days.
While it might not have been the most sensitive thing to say in a school that has an above-average population of liberals in Rent shirts, I am certainly of the mentality "I agree not what you say, but I will defend to the death your right to say it."
It's nice to see the ACLU doing something constructive instead of persecuting people.
Re:The ACLU is doing something constructive? Wow. (Score:2)
Does anyone actually expect compliance? (Score:2)
Re:This means nothing (Score:2)
The only difference is degree and consequences.
Re:This means nothing (Score:3)
Re:This means nothing (Score:2)
Re:This means nothing (Score:2, Interesting)
OK, then why do you need this? [about.com]
Re:This means nothing (Score:2, Interesting)
Re:The thing you have to realize (Score:2, Insightful)
Slavery? Gone! Who's going to pick the cotton?
Male only voting? Now even women can vote!
Child labor? Now they go to school instead, those lazy bums!
Re:The thing you have to realize (Score:4, Interesting)
I find it highly ironic that you would cling to such a false sense of security, particularly considering your opening statement:
America of 2003 is a far far cry from America of 1776.
The Second Amendment (The right to bear arms one that you reference) was added during a time when the most sophisticated weapons the US military sported were little more than muskets with bayonnettes. The second amendment was intented to ensure that the citizenry was guaranteed access to the exact same firepower and weapons as the military, thus ensuring that should the government ever need to be overthrown, the citizens would win. Same weapons * more people = ensured victory.
However, over the years, the government has slowly castrated the second amendment, insidiously changing its interpretation to guarantee ownership of little more than peashooters, while reserving the real hardware for the "good guys" (i.e., the military). Nowadays, citizens are not allowed to own anywhere near the same firepower as the military.
In an all-out battle of every citizen against the entire military, the military would wipe their collective asses with your piddly little
Combine this with the fact that for any kind of uprising to last more than a few hours, you'd require the support of a large percentage of the population, meaning you'd need to convince the masses that the government has crossed a line, and is finally corrupt enough to warrant violent resistance.
The people at Waco felt they were resisting tyranny. So did the people at Ruby Ridge. And the government crushed both of those "problems."
So in summary, I guess what I'm saying is, your
But hey, if it gives you a warm, fuzzy false sense of security, then who am I to rain on your parade.
apparently (Score:3, Insightful)
I totally agree with you on this. The second ammendment was set to protect the people from tyranny. The one problem with the way it was written is the founders did not anticipate the replacement of State militias by a federal military machine. During the start of the civil war, most troops were state militias and not federal. With the advent of conscription that picture changed.
It also fundamentally changed the perce
Re:The thing you have to realize (Score:3, Insightful)
Um, the military made up of citizens. So if every citizen were to demand change, that would make the entire military force be included in that group. Also, all the legislators and the judges
Re:The thing you have to realize (Score:3, Insightful)
The only real protection that the "average citizen" has against the military (and the more heavily armed members of law enforcement) is that most of the members of t